Main Koha release repository https://koha-community.org
Find a file
Galen Charlton cafaa26b45 granular permissions - created DB tables
First big commit in a project to add more granular
staff user permissions to Koha.

* Created two new database tables

permissions:
  stores a list of defined permissions; each
  permission is to be interpreted as a child
  of a top-level permission defined in the
  existing user flags.  For example, Tools (bit 13)
  now has a separate sub-permission for each
  individual tool.

  The columns are
    module_bit  = FK referencing userflags.bit
    code        = code, e.g., import_patrons
    description = e.g., "Import patron data"

user_permissions:
  stores a list of the specific permissions that
  a staff user actually has.   For example, if
  staff user 123 has only the 'import_patrons' subpermission
  of 'Tools' (module_bit = 13), that would be represented
  by having (123, 13, 'import_patrons' in user_permissions.

  user_permissions and borrowers.flags are now interpreted
  as follows (assuming the CheckSpecificUserPermissions syspref
  is ON):
    * If the appropriate bit (e.g., bit 13 for Tools) is set
      in borrowers.flags, the staff user can access all
      Tools functions.  There should be no rows in user_permissions
      for that staff user and userflag bit combination.
    * If the bit is not set in borrowers.flags, but one or
      more rows are present in user_permissions for that
      staff user and bit combination, the staff user can
      access the specified sub-functions.
    * If the bit is not set in borrower.flags and there are
      no rows in user_permissions for that staff user and
      bit combination, the user cannot access any of the functions.

  Note that this means that if a staff user can access all
  functions for a module (because the bit is set in borrowers.flags),
  the user will automatically be able access any new subfunctions
  added to permissions by a database update.

  The columns are:
    borrowernumber = FK referencing borrowers.borrowernumber
    module_bit, code = FK referencing permissions

* Added a new system preference, CheckSpecificUserPermissions

If this system preference is ON, staff users can be assigned
specific permissions which will be respected during
authorization checks.  If this system preference is OFF, the
current userflags semantics will continue to apply.

* Defined sub-permissions for Tools.  The list of specific
  tools permissions is now:

  edit_news          Write news for the OPAC and staff interfaces
  label_creator      Create printable labels and barcodes from catalog and patron data
  edit_calendar      Define days when the library is closed
  moderate_comments  Moderate patron comments
  edit_notices       Define notices
  edit_notice_status_triggers     Set notice/status triggers for overdue items
  view_system_logs   Browse the system logs
  inventory          Perform inventory (stocktaking) of your catalogue
  stage_marc_import  Stage MARC records into the reservoir
  manage_staged_marc Manage staged MARC records, including completing and reversing imports
  export_catalog     Export bibliographic and holdings data
  import_patrons     Import patron data
  delete_anonymize_patrons    Delete old borrowers and anonymize circulation history (deletes borrower reading history)
  batch_upload_patron_images  Upload patron images in batch or one at a time
  schedule_tasks     Schedule tasks to run

Signed-off-by: Joshua Ferraro <jmf@liblime.com>
2008-04-10 15:53:08 -05:00
acqui acqui/addorder.pl - use reliable GetBookSellerFromId instead of relying on name search. 2008-03-08 11:19:27 -06:00
admin granular permissions - created DB tables 2008-04-10 15:53:08 -05:00
authorities authorities: make tag editor links consistent with bib 2007-12-29 06:53:52 -06:00
C4 bug 2006: do not crash when paying a lost item fine 2008-04-10 15:52:55 -05:00
catalogue Fix authorised_value '0' problem with last commit on detail.pl 2008-04-07 15:59:50 -05:00
cataloguing BiblioAddsAuthorities improvement/fix 2008-04-10 02:55:08 -05:00
circ Formatting patron expiration date output (or was there a reason why this was commented out previously?) 2008-04-10 02:59:32 -05:00
errors bug 1803 - fix error page handling 2008-02-18 19:32:07 -06:00
etc adding Ç as equivale nt to c for frenchies 2008-04-07 15:56:28 -05:00
install_misc install: tweaked 'make update' 2008-02-15 08:30:53 -06:00
installer granular permissions - created DB tables 2008-04-10 15:53:08 -05:00
koha-tmpl fixed XHTML error 2008-04-10 15:53:02 -05:00
labels bug 2009: fix to include "type" so that adding items to label batches works. 2008-04-10 03:00:36 -05:00
members Some formatting changes, bringing displays in circ and moremember more in line with each other 2008-04-08 08:37:03 -05:00
misc Fix calls to CalcFine, and make fines obey CircControl syspref (get homebranch withssue data). 2008-04-08 08:37:01 -05:00
opac Reintroducing history dates for serial-issue (see previous commit for staff // feature) 2008-04-10 02:52:54 -05:00
reports All patches to Koha 3 beta to date. All work with branches. 2008-04-03 14:42:07 -05:00
reserve Report borrower's home library on reserves library mismatch. 2008-03-25 07:20:22 -05:00
reviews functions that were in C4::Interface::CGI::Output are now in C4::Output. 2007-04-24 13:54:28 +00:00
rss rel_3_0 moved to HEAD 2007-03-09 15:12:54 +00:00
serials bugfix : independantbranches behaviour 2008-04-10 02:55:50 -05:00
skel installer: fixed chown invocation; added skel for KOHA_LOG_DIR 2007-12-17 09:13:53 -06:00
sms SMS - widespread cleanup and moving code away from Cyprus/Turkey-specific implementation. Much more needed. 2008-02-06 23:19:30 -06:00
suggestion removing useless code 2007-10-24 17:03:38 -05:00
svc bib_profile web svc: report biblioitems.itemtype subfield as non-mandatory 2007-12-04 15:06:05 -06:00
t use bind variables in C4::Acquisition::GetPendingOrders 2008-03-19 15:46:23 -05:00
tmp/modified_authorities changing DO_NOT_REMOVE to README.txt 2007-10-21 19:14:41 -05:00
tools Bugfix: Correcting misspelled variable 2008-04-10 02:59:22 -05:00
virtualshelves Shelves consolidation to C4::VirtualShelves::Page. I can tell the consolidation 2008-01-14 16:45:21 -06:00
.htaccess bug 1803 - fix error page handling 2008-02-18 19:32:07 -06:00
about.pl don't sort @INC when displaying on about page 2008-02-15 08:24:43 -06:00
changelanguage.pl fixing bug 1754: Hide language chooser if only one translation is available 2008-03-17 21:28:31 -05:00
edithelp.pl edithelp.pl - cleanup, refactor and error feedback to user 2008-01-08 14:04:48 -06:00
fix-perl-path.PL installer: improvements to fix-path-perl.PL on Win32 2007-12-20 19:20:12 -06:00
help.pl Adding yuipath variable to help.pl, and doing some cleanup of help templates (standardizing structure, mostly, and correcting some nomenclature). 2008-01-09 14:50:20 -06:00
INSTALL adding upgrade instructions to INSTALL and INSTALL.debain 2008-02-21 14:04:47 -06:00
install-CPAN.pl BUGFIX: need to create authors/id if CPAN is unused 2007-09-07 05:26:16 -05:00
INSTALL.debian updating installation docs 2008-03-23 00:26:30 -05:00
kohaversion.pl granular permissions - created DB tables 2008-04-10 15:53:08 -05:00
LICENSE re-naming some files prior to release 2007-12-30 12:13:39 -06:00
mainpage.pl fixing permissions requirements on mainpage.pl 2008-01-04 21:30:14 -06:00
Makefile.PL NOTE: REQUIRES INSTALLATION OF Image::Magick; Adding image scaling/resizing capability to picture-upload.pl 2008-04-08 17:00:05 -05:00
MANIFEST.SKIP Do not pack the git repository 2007-09-06 17:14:36 -05:00
README adding README 2007-12-30 12:13:57 -06:00
rewrite-config.PL install: added --prev-install-log option to Makefile.PL 2008-02-15 08:30:51 -06:00

Koha 3 - the next-generation release of the award-winning Koha open-source
integrated library system.

30 December 2007 - Joshua Ferraro <jmf AT liblime DOT com>

Koha is distributed under the GNU GPL. Please read the file LICENSE for
more details.

To install or upgrade Koha, please see the INSTALL file.

Please report any bugs to the koha mailing lists or bug tracker and we
will try to fix them in a future release. The main koha web site is
http://www.koha.org/